CVE-2023-46272

HIGH

Extreme Networks IQ Engine <10.6r5 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ah_auth service

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0039
EPSS Percentile 30.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-121
Status published
Published Feb 19, 2025
Tracked Since Feb 18, 2026